Vulnerabilities (CVE)

Filtered by vendor Identityserver Subscribe
Filtered by product Identityserver3
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-12677 1 Identityserver 1 Identityserver3 2024-02-04 4.3 MEDIUM 6.1 MEDIUM
IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to obtain sensitive information about the IdentityServer authorization response.